GRC Report Staff

EIOPA has acknowledged that Section 9.3 of its RFR Technical Documentation does not align with Article 51(a), paragraphs (2) and (3) of the Delegated Regulation, because it omits that assets and liabilities may be discounted using different curves. Both the omission and the PVBP presentation will be corrected in the next publication. Compliance and actuarial teams should treat the Delegated Regulation as the governing definition when calculating the CSSR for Volatility Adjustment (VA) purposes.

The FCA's Perimeter Guidance Manual (PERG) sets out when firms need authorization or exemption under the Financial Services and Markets Act 2000. The current text carries a notice that PERG has not yet been updated for the new regulated activity of providing targeted support, and it highlights the cryptoasset guidance in PERG 18. Compliance teams should treat the perimeter analysis for these areas as provisional and watch for further FCA changes.

The Norway Financial Supervisory Authority has published a warning about GoldPrideHoldings (goldprideholdings.com), with source material pointing to the Swiss regulator FINMA's warning list. Compliance teams should treat the entity as a potential unauthorized or fraudulent financial services provider and update screening and client-protection controls accordingly.

A member of the Board of Appeal of the European Supervisory Authorities has filed a public declaration of commitment and interests dated June 16, 2026, under Article 59(6) of the ESA founding regulations. The document is a routine governance filing with no new obligations for financial institutions. It matters to compliance teams mainly as a signal of the independence and integrity safeguards that apply to the body that hears appeals against ESA decisions.

EIOPA has issued a final Q&A (ID 3612) clarifying how undertakings should treat renewed and expired policies in the new QRT S.27.03 and where to find guidance on commercial versus industrial asset types. Expired policies must follow the approach used for comparable datapoints in QRT S.05.01, and asset classification guidance sits in Annex IV of S.06.02. Compliance teams should align data logic and classification rules now to avoid inconsistent submissions.

BaFin has warned the public about a series of nearly identical websites, run by unknown operators, that promote an AI-based investment platform under the names "Nevald," "Rendzyx," and "Zinsoren" without the required authorization. Compliance teams should treat the listed domains as indicators of investment fraud and use them to strengthen fraud detection, customer protection, and monitoring controls.

EIOPA's Q&A 3507 explains that differences between firms' replicated Colombian peso (COP) risk-free rate curves and the published curve can arise from the timing of market data capture. Less liquid instruments may be updated by data providers after EIOPA's snapshot, and EIOPA identified a 3.4bp deviation at the 1Y maturity in this case. Compliance and actuarial teams that replicate RFR curves for Solvency II purposes should understand this limitation when reconciling their results.